Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/z71JE3vO85dUssRUb-Gk_3QfcBc.roa
File: z71JE3vO85dUssRUb-Gk_3QfcBc.roa (raw, json)
Hash identifier: LDdZ8PKwiDI9GKY8fa2zhZ3VWA/2nILlFRh2ZXaGFRo=
Subject key identifier: CF:BD:49:13:7B:CE:F3:97:54:B2:C4:54:6F:E1:A4:FF:74:1F:70:17
Certificate issuer: /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial: 0192B95213C568F035935C4D0D4B49232BB5
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/z71JE3vO85dUssRUb-Gk_3QfcBc.roa
Signing time: Wed 23 Oct 2024 12:20:16 +0000
ROA not before: Wed 23 Oct 2024 12:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214113
IP address blocks: 2a01:e2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:52:13:c5:68:f0:35:93:5c:4d:0d:4b:49:23:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Validity
Not Before: Oct 23 12:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfbd49137bcef39754b2c4546fe1a4ff741f7017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:95:f3:d4:b4:9a:90:12:03:31:1e:bf:44:
11:c3:83:7c:d7:98:51:ac:8a:87:a2:e1:94:85:c4:
0d:d4:0c:9a:d5:ea:5a:e2:b6:45:69:24:20:7e:0a:
2b:07:23:36:1d:f1:5c:29:cf:27:35:e2:a8:c5:85:
80:81:57:1d:c4:4f:78:8e:68:12:3e:a0:8d:4a:2d:
9d:9b:c3:e5:d8:c1:7c:2e:19:1e:a0:66:ab:98:84:
c8:be:7f:24:1f:ca:3b:28:33:c6:15:2e:b8:12:20:
46:d3:ac:83:35:88:9b:c4:23:7f:a4:9a:12:c1:2a:
e9:85:06:2a:8b:4f:30:14:ae:f9:24:72:b2:e1:ec:
41:7a:3e:07:5d:15:07:89:35:b0:b8:37:80:24:19:
7c:e0:8b:12:8d:23:65:b7:e7:9a:89:63:f6:06:c7:
7b:4a:42:1a:41:ad:f5:92:ed:55:94:62:52:87:e9:
13:72:c9:d1:ad:48:e1:f3:9a:e4:a0:e6:71:82:7e:
ea:ae:02:1d:4f:6f:d9:fe:7a:17:9c:16:00:0f:34:
49:de:3b:f3:3d:e5:1c:e7:a4:14:8b:0b:6b:65:27:
c9:87:96:bc:b2:e5:19:d7:32:75:34:23:55:f2:8c:
0f:64:fb:42:26:22:5f:e6:32:6d:7d:a3:c2:fe:3f:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BD:49:13:7B:CE:F3:97:54:B2:C4:54:6F:E1:A4:FF:74:1F:70:17
X509v3 Authority Key Identifier:
keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/z71JE3vO85dUssRUb-Gk_3QfcBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e2c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:02:36:a6:af:66:9e:01:ed:90:6d:e0:bd:85:50:e5:71:0e:
36:8f:04:4c:a4:b9:5c:97:16:79:31:96:38:69:b3:9a:bd:43:
2e:61:c7:2c:ae:2a:01:67:c0:2a:a9:e4:e1:36:9d:50:80:89:
19:e2:4a:b3:f4:64:3d:eb:ae:7f:78:f9:f0:80:f3:75:65:1d:
d9:18:03:70:f1:30:ec:2b:d9:58:19:52:25:c8:c8:5e:3d:bb:
c7:ba:ef:65:07:1d:cb:8a:6f:89:fe:b5:fe:32:20:4a:c1:ec:
84:cc:b2:51:1f:c0:16:fb:71:7e:00:c1:d2:c6:98:52:f8:0a:
a3:1e:0a:4e:05:f0:83:21:eb:ab:8f:1b:b9:65:b7:86:eb:82:
eb:8e:b7:58:22:d3:02:bb:1d:44:2f:c6:52:33:20:c8:da:01:
6e:e5:f9:ec:51:0b:50:1b:25:20:af:39:c5:14:c1:f5:31:53:
1a:9f:d2:a1:2a:d2:2a:9a:15:63:a8:1c:c4:2f:b8:c6:1a:16:
35:76:b9:07:2f:16:b1:63:70:ed:e6:35:dd:42:85:c5:35:10:
4d:7c:79:21:b7:5f:b6:3e:f0:2c:46:ba:4b:9b:0b:d5:45:6e:
b7:3d:31:86:42:e2:a0:a5:cf:6c:9d:52:e7:09:1c:18:02:b2:
30:d9:c3:15
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZK5UhPFaPA1k1xNDUtJIyu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTYyYjE3MTYxZjMzZTNiMWE2OTEwYzYyNzJmZWNiMzM4
ZTBmNmYwHhcNMjQxMDIzMTIyMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmJkNDkxMzdiY2VmMzk3NTRiMmM0NTQ2ZmUxYTRmZjc0MWY3MDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnquV89S0mpASAzEev0QRw4N815hR
rIqHouGUhcQN1Aya1epa4rZFaSQgfgorByM2HfFcKc8nNeKoxYWAgVcdxE94jmgS
PqCNSi2dm8Pl2MF8LhkeoGarmITIvn8kH8o7KDPGFS64EiBG06yDNYibxCN/pJoS
wSrphQYqi08wFK75JHKy4exBej4HXRUHiTWwuDeAJBl84IsSjSNlt+eaiWP2Bsd7
SkIaQa31ku1VlGJSh+kTcsnRrUjh85rkoOZxgn7qrgIdT2/Z/noXnBYADzRJ3jvz
PeUc56QUiwtrZSfJh5a8suUZ1zJ1NCNV8owPZPtCJiJf5jJtfaPC/j80bQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM+9SRN7zvOXVLLEVG/hpP90H3AXMB8GA1UdIwQY
MBaAFFbmKxcWHzPjsaaRDGJy/sszjg9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAt
ZTBjMmJkZmQ2NTg1LzEvejcxSkUzdk84NWRVc3NSVWItR2tfM1FmY0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAtZTBjMmJkZmQ2NTg1
LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgHiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAAAI2pq9mngHtkG3gvYVQ5XEONo8ETKS5XJcWeTGW
OGmzmr1DLmHHLK4qAWfAKqnk4TadUICJGeJKs/RkPeuuf3j58IDzdWUd2RgDcPEw
7CvZWBlSJcjIXj27x7rvZQcdy4pvif61/jIgSsHshMyyUR/AFvtxfgDB0saYUvgK
ox4KTgXwgyHrq48buWW3huuC6463WCLTArsdRC/GUjMgyNoBbuX57FELUBslIK85
xRTB9TFTGp/SoSrSKpoVY6gcxC+4xhoWNXa5By8WsWNw7eY13UKFxTUQTXx5Ibdf
tj7wLEa6S5sL1UVutz0xhkLioKXPbJ1S5wkcGAKyMNnDFQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:17 2024 by rpki-client on console-fra.rpki-client.org